300-425 Question 217
Single answerAn enterprise network administrator is configuring certificate provisioning on a Cisco wireless LAN controller (WLC) to ensure secure communication between the WLC and access points. Which of the following steps is required to successfully provision a certificate on the controller?
- A
Generate a Certificate Signing Request (CSR) on the WLC and submit it to a trusted Certificate Authority (CA).
- B
Manually upload the controller’s certificate to each access point in the network.
- C
Use the self-signed certificate provided by the WLC to establish trust with access points.
- D
Enable automatic certificate enrollment on the WLC to retrieve certificates without manual intervention.
Show answer and explanation
Correct answer: A
Explanation
To provision a secure certificate on a Cisco wireless LAN controller, the administrator must generate a Certificate Signing Request (CSR) on the controller and submit it to a trusted Certificate Authority (CA). Once signed by the CA, the certificate can be imported back into the WLC to establish secure communication with access points. This process ensures the certificate is trusted and meets enterprise security requirements.
- A. Correct.
Correct. Generating a CSR and submitting it to a trusted CA is the standard process for provisioning a secure certificate on the WLC. This ensures the certificate is signed by a trusted entity.
- B. Incorrect.
Incorrect. Certificates are not manually uploaded to access points; instead, access points establish trust with the WLC using the certificate installed on the controller.
- C. Incorrect.
Incorrect. Self-signed certificates are less secure and are typically not used in enterprise environments where a trusted CA is preferred.
- D. Incorrect.
Incorrect. Automatic certificate enrollment is not a feature supported directly on the WLC for initial certificate provisioning. Manual CSR generation and submission to a CA is required.